Sd855 Firmware

CVEs (735)

• CVE-2018-11940CriMay 24, 2019
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD…

• CVE-2018-11937CriMay 24, 2019
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD…

• CVE-2018-11930CriMay 24, 2019
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150,…

• CVE-2018-11271CriMay 24, 2019
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in…

• CVE-2018-11945CriFeb 25, 2019
  Qualcomm

  Snapdragon
  risk 0.64cvss 9.8epss 0.01

  Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2023-33063HigKEVDec 5, 2023
  Qualcomm

  DSP Service
  risk 0.63cvss 7.8epss 0.01

  Memory corruption in DSP Services during a remote call from HLOS to DSP.

• CVE-2020-11261HigKEVJun 9, 2021
  Qualcomm

  Snapdragon
  risk 0.63cvss 7.8epss 0.02

  Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2021-30317CriFeb 11, 2022
  Qualcomm

  Snapdragon
  risk 0.61cvss 9.3epss 0.01

  Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2023-43538CriJun 3, 2024
  Qualcomm

  TZ Secure OS
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.

• CVE-2023-28578CriMar 4, 2024
  Qualcomm

  Core services
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in Core Services while executing the command for removing a single event listener.

• CVE-2023-33072CriFeb 6, 2024
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in Core while processing control functions.

• CVE-2023-33032CriJan 2, 2024
  Qualcomm

  TZ Secure OS
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

• CVE-2023-33030CriJan 2, 2024
  Qualcomm

  HLOS
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in HLOS while running playready use-case.

• CVE-2023-21651CriAug 8, 2023
  Qualcomm

  TEE
  risk 0.60cvss 9.3epss 0.00

  Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

• CVE-2022-33288CriApr 13, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

• CVE-2022-33269CriApr 13, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

• CVE-2022-33231CriApr 13, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to double free in core while initializing the encryption key.

• CVE-2022-33257CriMar 10, 2023
  Qualcomm

  Core
  risk 0.60cvss 9.3epss 0.00

  Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

• CVE-2022-33232CriFeb 12, 2023
  Qualcomm

  Wcd9380 Firmware
  risk 0.60cvss 9.3epss 0.00

  Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

• CVE-2021-35122CriSep 2, 2022
  Qualcomm

  Snapdragon
  risk 0.60cvss 9.3epss 0.00

  Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables